Infectado por virus

Résultados del análisis de Farbar Recovery Scan Tool (FRST) (x64) Versión: 16.05.2018 01
Ejecutado por patou (administrador) en PATOU-PC (02-06-2018 14:40:06)
Ejecutado desde C:\Users\patou\Downloads
Perfiles cargados: patou (Perfiles disponibles: patou)
Plataforma: Windows 7 Professional Service Pack 1 (X64) Idioma: Francés (Francia)
Internet Explorer Versión 11 (Navegador por defecto: FF)
Modo de arranque: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Con lista blanca) =================

(Si un elemento está incluido en el archivo fixlist.txt, el proceso se detendrá. El archivo no será movido.)

(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Piriform Ltd) C:\Program Files (x86)\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe
() C:\Windows\Temp\g3A8F.tmp.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(www.xmrig.com) C:\Users\patou\AppData\Local\Temp\wup\wupv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registro (Con lista blanca) ===========================

(Si un elemento está incluido en el archivo fixlist.txt, el elemento del Registro se restaurará al valor predeterminado o se eliminará. El archivo no será movido.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2015-01-04] (Qualcomm®Atheros®)
HKLM\ CertificadosNoPermitidos: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ATENCIÓN
HKLM\ CertificadosNoPermitidos: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Run: [AutumnWater] => C:\Windows\rss\csrss.exe [3167232 2018-06-02] () <==== ATENCIÓN
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Run: [CCleaner Monitoring] => C:\Program Files (x86)\CCleaner\CCleaner64.exe [10021040 2017-10-18] (Piriform Ltd)
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
IFEO\7za.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\assistant.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\hola.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\hola_setup.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\hola_svc.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\hola_updater.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\IMF_ActionCenterDownloader.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\malwarebytes_assistant.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbam.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbamdor.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbampt.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbamresearch.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbamscheduler.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbamservice.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mbamtray.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mweshield.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
IFEO\mwesshepherd.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare\AutoReactivator.exe
Lsa: [Notification Packages] DPPassFilter scecli
ShellExecuteHooks: Sin nombre - {BFD98515-CD74-48A4-98E2-13D209E3EE4F} - -> Sin archivo
GroupPolicy: Restricción - Windows Defender <==== ATENCIÓN
GroupPolicy\User: Restricción ? <==== ATENCIÓN

==================== Internet (Con lista blanca) ====================

(Si un elemento está incluido en el archivo fixlist.txt, si es un elemento del Registro, será eliminado o restaurado al valor predeterminado.)

Hosts: Hay más de un elemento en hosts. Ver la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{FF9B19B4-48D1-4CB2-AD57-17FF630AE987}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restricción <==== ATENCIÓN
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\Software\Microsoft\Internet Explorer\Main, Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBEQo0lOCwIxrzs2Rcb6iYh7SmU9Toh2f2c4s_UDCiHA3EU7TXj9eNbsR4cyT7Dr6AORoMzvo3utxRHbkW4CopZRyibbguzjc0VL-paGa3NyP81J3Cs8-pTABl3e-pyq4ZWBcn9hnTJHGOkOnoN-YU6xKAotgHHxYd1HR-va5mbcd3mLUoK38bQ96c7HTc,&q={searchTerms}
HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\Software\Microsoft\Internet Explorer\Main, Start Page = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBEQo0lOCwIxrzs2Rcb6iYh7SmU9Toh2f2c4s_UDCiHA3EU7TXj9eNbsR4cyT7Dr6AORoMzvo3utxRHbkW4CopZRyibbguzjc0VIw0Ea9M9NwjWSgQx681kLU54KEqjUkxUqMUhO_m2prc2KW_LeC02giXAoVkWV8PIHUzWwAvWYpuQnbGo6_s8RYuoH_U,
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-1000389763-2980830304-2624313999-1000 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKU\S-1-5-21-1000389763-2980830304-2624313999-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={searchTerms}&fr=ntg&product_id=%7B6B5028FF-F684-450C-BA49-20DA4C8278F2%7D&gp=811610
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-01-25] (IObit)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-11-17] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2018-05-31] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> Sin archivo
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\ssv.dll [2018-04-26] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-11-17] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2018-05-30] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\jp2ssv.dll [2018-04-26] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-11-17] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-11-17] (Google Inc.)
Toolbar: HKU\S-1-5-21-1000389763-2980830304-2624313999-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-11-17] (Google Inc.)
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2018-05-30] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: w9eo4vjn.default-1525362712753
FF ProfilePath: C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753 [2018-06-02]
FF Homepage: Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753 -> hxxps://www.sfr.fr/portail.html
FF NewTab: Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753 -> file:///C:/ProgramData/Subairs/ff.NT
FF HomepageOverride: Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753 -> Deshabilitado: homepage@mail.ru
FF NewTabOverride: Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753 -> Habilitado: {a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}
FF Extension: (Домашняя страница Mail.Ru) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\Extensions\homepage@mail.ru.xpi [2018-05-29]
FF Extension: (Unlimited Free VPN - Hola) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\Extensions\jid1-4P0kohSJxU1qGg@jetpack.xpi [2018-05-15]
FF Extension: (Sin nombre) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2018-06-02]
FF Extension: (Поиск Mail.Ru) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\Extensions\search@mail.ru.xpi [2018-05-29]
FF Extension: (Пульт) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\Extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}.xpi [2018-05-29]
FF Extension: (TLS 1.3 gradual roll-out fallback-limit) - C:\Users\patou\AppData\Roaming\Mozilla\Firefox\Profiles\w9eo4vjn.default-1525362712753\features\{0a9235a1-6119-471e-ab6a-c7a5d1458c69}\tls13-version-fallback-rollout-bug1462099@mozilla.org.xpi [2018-05-31] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt => no encontrado
FF HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\patou\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => no encontrado
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-29] ()
FF Plugin: @microsoft.com/GENUINE -> deshabilitado [Sin archivo]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2018-05-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-29] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.162.2 -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\dtplugin\npDeployJava1.dll [2018-04-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.162.2 -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\plugin2\npjp2.dll [2018-04-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> deshabilitado [Sin archivo]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2018-05-19] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-09-16] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-12] (Adobe Systems Inc.)

Chrome:
=======
CHR res: infectado resources.pak (script Adware). Reinstalar Chrome. <==== ATENCIÓN
CHR HomePage: Default -> hxxps://fr.yahoo.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/","chrome://apps/","hxxps://www.sfr.fr/portail.html","hxxps://www.google.com/","hxxps://www.google.com/"
CHR Profile: C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default [2018-06-02]
CHR Extension: (uBlock Origin) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-05-30]
CHR Extension: (Share Sessions) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\dldfccnkgldjoochmlhcbhljmlbcgdao [2018-05-14]
CHR Extension: (EditThisCookie) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2018-05-16]
CHR Extension: (Ace Script) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2018-02-13]
CHR Extension: (Pagos a través de la tienda web de Chrome) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-03]
CHR Extension: (Simple Finder Multi Region) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2018-05-30]
CHR Extension: (Chrome Media Router) - C:\Users\patou\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-05-30]
CHR HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bhjhnafpiilpffhglajcaepjbnbjemci] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hcadgijmedbfgciegjomfpjcdchlhnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lhemechcanjmilllmccjbjldonmnnjjj] - hxxps://clients2.google.com/service/update2/crx

==================== Servicios (Con lista blanca) ====================

(Si un elemento está incluido en el archivo fixlist.txt, se eliminará del Registro. El archivo no será movido, a menos que se registre por separado.)

S4 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [323200 2015-01-04] (Windows (R) Win 7 DDK provider) [Archivo no firmado]
S4 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [1668344 2008-10-16] (AuthenTec, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8652976 2018-05-24] (Microsoft Corporation)
S4 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [208760 2017-07-27] (Dell Inc.)
S4 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3294584 2017-07-27] (Dell Inc.)
S4 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [217464 2017-07-27] (Dell Inc.)
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
S4 MEmusvc; C:\Program Files\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.)
S4 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324544 2018-04-26] (Realtek Semiconductor)
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
S4 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [41432 2017-11-30] (Dell

Resultados del Análisis adicional de Farbar Recovery Scan Tool (x64) Versión: 16.05.2018 01
Ejecutado por patou (02-06-2018 14:42:03)
Ejecutado desde C:\Users\patou\Downloads
Windows 7 Professional Service Pack 1 (X64) (2016-03-15 14:12:10)
Modo de arranque: Normal
==========================================================


==================== Cuentas: =============================

Administradore (S-1-5-21-1000389763-2980830304-2624313999-500 - Administrador - Deshabilitado)
HomeGroupUser$ (S-1-5-21-1000389763-2980830304-2624313999-1002 - Limitado - Habilitado)
Invitado (S-1-5-21-1000389763-2980830304-2624313999-501 - Limitado - Deshabilitado)
patou (S-1-5-21-1000389763-2980830304-2624313999-1000 - Administrador - Habilitado) => C:\Users\patou

==================== Centro de seguridad ========================

(Si un elemento está incluido en el archivo fixlist.txt, será eliminado.)

AS: Windows Defender (Deshabilitado - Actualizado) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Deshabilitado - Actualizado) {A751AC20-3B48-5237-898A-78C4436BB78D}

==================== Programas instalados ======================

(Solo los programas publicitarios ('adware') marcados como 'ocultos' ('Hidden') pueden ser añadidos al archivo fixlist.txt para que no estén más ocultos. Los programas publicitarios deberán ser desinstalados manualmente.)

AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Versión: 2.00.10.33 - STMicroelectronics)
Adobe Acrobat Reader DC - Francés (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Versión: 18.011.20038 - Adobe Systems Incorporated)
Adobe Flash Player 29 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Versión: 29.0.0.171 - Adobe Systems Incorporated)
Adobe Flash Player 29 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Versión: 29.0.0.171 - Adobe Systems Incorporated)
Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Versión: 29.0.0.113 - Adobe Systems Incorporated)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Versión: 385.69 - NVIDIA Corporation) Oculto
aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Versión: 3.8 - DsNET Corp)
AuthenTec Fingerprint Software (HKLM-x32\...\{F2393654-7D1F-48B3-9E4C-4007D120ABB8}) (Versión: 3.2.0.248 - AuthenTec, Inc.)
AVerMedia MCE Encoder x64 4.2.1.71 (HKLM-x32\...\AVerMedia MCE Encoder x64) (Versión: 4.2.1.71 - AVerMedia Technologies, Inc.)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Versión: 4.1.13.3306 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Versión: 5.36 - Piriform)
Centro de mouse y teclado de Microsoft (HKLM\...\{983127A6-FFF9-4B20-8A27-5A6274B8DB2B}) (Versión: 3.1.250.0 - Microsoft Corporation) Oculto
Centro de mouse y teclado de Microsoft (HKLM\...\Microsoft Mouse and Keyboard Center) (Versión: 3.1.250.0 - Microsoft Corporation)
Corel PaintShop Pro X6 (HKLM-x32\...\_{166D1CB6-DD8A-40DD-9E25-4D31D2D6DE4D}) (Versión: 16.1.0.48 - Corel Corporation)
Corel PaintShop Pro X6 (HKLM-x32\...\{161AB62E-65D6-46E5-B3D8-2AC15D3B920B}) (Versión: 16.1.0.48 - Corel Corporation) Oculto
Creative Pack Volume 1 (HKLM-x32\...\{05181A78-3BA6-4B63-BCE8-888A4BCAACFA}) (Versión: 3.0.1 - Corel Corporation)
Creative Pack Volume 3 - Kids (HKLM-x32\...\{7F2D1105-70ED-4379-8772-3F06E1D23F5A}) (Versión: 1.00.0000.01 - Pinnacle Systems)
Dazzle Video Capture DVC100 X64 Driver 1.07 (HKLM-x32\...\{631D71FD-237F-4D74-B090-88E66FBC5A10}) (Versión: 1.07.0000 - Pinnacle)
Dazzle Video Capture DVC100 X64 Driver 1.08 (HKLM-x32\...\{FB4B9EB9-68B2-4C42-8C38-B65F8FE5A5CA}) (Versión: 1.08.0000 - Pinnacle)
Dell Remote Access (HKLM-x32\...\{F66A31D9-7831-4FBA-BA02-C411C0047CC5}) (Versión: 1.2.0.0 - Dell Inc.)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Versión: 2.0.6875.668 - Dell)
Dell SupportAssistAgent (HKLM\...\{4015CD01-07AB-4354-9E43-E63DFAB5A6A2}) (Versión: 2.1.2.7 - Dell)
Dell WLAN y Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Versión: 9.0 - Dell Inc.)
Digital Line Detect (HKLM-x32\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Versión: 1.21 - BVRP Software, Inc)
DigitalPersona Fingerprint Software 5.20 (HKLM\...\{C0C2D40A-1231-46FA-8F02-B45E6BF2036A}) (Versión: 5.20.230 - DigitalPersona, Inc.)
DirectX 9 Runtime (HKLM-x32\...\{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}) (Versión: 1.00.0000 - Sonic Solutions) Oculto
Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Versión: 5.0.3 - IObit)
Firemin 6.1.0.4998 (HKLM\...\Firemin_is1) (Versión: 6.1.0.4998 - Rizonesoft)
Fresco Logic USB3.0 Host Controller (HKLM\...\{DB08D880-7E77-42E6-B050-0B4F984004B0}) (Versión: 3.5.93.0 - Fresco Logic Inc.)
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Versión: 2.8.22 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Versión: 66.0.3359.181 - Google Inc.)
Google Toolbar para Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Versión: 1.0.0 - Google Inc.) Oculto
Google Toolbar para Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4}) (Versión: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Versión: 1.3.33.17 - Google Inc.) Oculto
Hollywood FX Volumes 1-3 (HKLM-x32\...\{E3D181F8-246B-497F-945E-6DB98CBA6677}) (Versión: 2.0.1 - Corel Corporation)
HP Deskjet 3050A J611 series - Encuesta sobre la mejora del producto (HKLM\...\{2FFFDE2C-9861-4003-AE65-BD13A29E074A}) (Versión: 25.0.571.0 - Hewlett-Packard Co.)
HP Deskjet 3050A J611 series Ayuda (HKLM-x32\...\{97DDCAB8-B770-4089-A10F-67568069D78A}) (Versión: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Versión: 1.0.0.5192 - HP Photo Creations)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Versión: 5.005.002.002 - Hewlett-Packard)
ICA (HKLM-x32\...\{166D1CB6-DD8A-40DD-9E25-4D31D2D6DE4D}) (Versión: 16.0.0.113 - Corel Corporation) Oculto
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{AA67D612-0BE5-44D6-9A91-592958F754A1}) (Versión: 13.0.198 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Versión: 11.0.6.1194 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Versión: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Versión: 12.9.0.1001 - Intel Corporation)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{6230EE50-BD4E-4B39-904D-3E7600053E08}) (Versión: 6.2.1 - Intel Corporation)
IObit Malware Fighter 5 (HKLM-x32\...\IObit Malware Fighter_is1) (Versión: 5.1 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Versión: 7.4.0.8 - IObit)
IPM_PSP_COM (HKLM-x32\...\{164D34E1-0271-4960-8A26-E8990A302DB1}) (Versión: 16.0.0.113 - Corel Corporation) Oculto
IPM_PSP_COM64 (HKLM\...\{1678F86C-889D-4198-8249-F4625058256B}) (Versión: 16.0.0.113 - Corel Corporation) Oculto
ITECIR Driver (HKLM-x32\...\{FCED9B62-34FF-4C15-8A23-F65221F7874D}) (Versión: 1.00.000 - ITE) Oculto
iZotope Music & Speech Cleaner (HKLM-x32\...\iZotope Music & Speech Cleaner_is1) (Versión: 1.00 - iZotope, Inc.)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Versión: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 162 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180162F0}) (Versión: 8.0.1620.12 - Oracle Corporation)
Keyboard Lock Status (HKLM-x32\...\{144A1586-E16C-448D-910D-E12ACD65DD98}) (Versión: 1.00.0000 - Logitech)
K-Lite Mega Codec Pack 14.0.0 (HKLM-x32\...\KLiteCodecPack_is1) (Versión: 14.0.0 - KLCP)
Kodi (HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\Kodi) (Versión: - XBMC-Foundation)
Software básico del dispositivo HP Deskjet 3050A J611 series (HKLM\...\{6B6856BE-3ADD-4C18-9396-CAE664CCEF8E}) (Versión: 25.0.571.0 - Hewlett-Packard Co.)
MEmu (HKLM-x32\...\MEmu) (Versión: 3.6.2.0 - Microvirt Software Technology Co. Ltd.)
Microsoft .NET Framework 4.7.1 (Francés) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Versión: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Versión: 4.7.02558 - Microsoft Corporation)
Microsoft Office Profesional Plus 2016 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Versión: 16.0.9330.2087 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\OneDriveSetup.exe) (Versión: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Versión: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Versión: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Versión: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Versión: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Versión: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Versión: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Versión: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Versión: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Versión: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Versión: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Versión: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Versión: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Versión: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Versión: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Versión: 12.0.30501.0 - Microsoft Corporation)
Actualizaciones de NVIDIA 28.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Versión: 28.0.0.0 - NVIDIA Corporation) Oculto
Mozilla Firefox 60.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 60.0.1 (x64 fr)) (Versión: 60.0.1 - Mozilla)
Servicio de Mantenimiento de Mozilla (HKLM\...\MozillaMaintenanceService) (Versión: 57.0.4 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Versión: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Versión: 4.20.9876.0 - Microsoft Corporation)
NetWaiting (HKLM-x32\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Versión: 2.5.46 - BVRP Software, Inc)
NewBlue Effects (HKLM-x32\...\{B0A3963B-6D9C-40B7-B5CA-1284EE1F4A29}) (Versión: 1.0 - Corel Corporation)
NVIDIA GeForce Experience 3.9.0.61 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Versión: 3.9.0.61 - NVIDIA Corporation)
NVIDIA Software sistema PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Versión: 9.17.0524 - NVIDIA Corporation)
NVIDIA Controlador 3D Vision 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Versión: 385.69 - NVIDIA Corporation)
NVIDIA Controlador gráfico 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Versión: 385.69 - NVIDIA Corporation)
Componente de extensibilidad de Office 16 Click-to-Run (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Versión: 16.0.9330.2087 - Microsoft Corporation) Oculto
Componente de licenciamiento de Office 16 Click-to-Run (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Versión: 16.0.9330.2087 - Microsoft Corporation) Oculto
Componente de localización de Office 16 Click-to-Run (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Versión: 16.0.9330.2087 - Microsoft Corporation) Oculto
OpenOffice 4.1.5 (HKLM-x32\...\{155C4F2E-7381-4B80-B258-FD0600C9C46B}) (Versión: 4.15.9789 - Apache Software Foundation)
Panel de control NVIDIA 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Versión: 385.69 - NVIDIA Corporation) Oculto
PhotoShowExpress (HKLM-x32\...\{3250260C-7A95-4632-893B-89657EB5545B}) (Versión: 2.0.063 - Sonic Solutions) Oculto
Pinnacle Creative Pack Volume 2 (HKLM-x32\...\{0299DF57-FF2E-42C6-A4D7-9480E537D191}) (Versión: 1.00.0000.16 - Pinnacle Systems)
Pinnacle Scorefitter Volume 3 - Travel (HKLM-x32\...\{C8242A93-DA0A-4DED-997B-CBA00E254E91}) (Versión: 1.00.0000.05 - Pinnacle Systems)
Pinnacle Studio 18 - Install Manager (HKLM-x32\...\{39B53CC2-EE72-44E6-800D-C61A6465BF1A}) (Versión: 18.0.10147 - Corel Corporation)
Pinnacle Studio 18 - Paquete de contenido estándar (HKLM-x32\...\{37D4E0DC-B765-4915-86D8-A39433A87B75}) (Versión: 18.0 - Corel Corporation)
Pinnacle Studio 18 (HKLM-x32\...\{11FB47FB-B341-4FD8-A505-E4C0CC0536C1}) (Versión: 18.0.1.10212 - Corel Corporation)
Pinnacle Studio 18 Add-Ons (HKLM-x32\...\{0BCCDCE5-D1AD-47A9-8864-D2A411403D89}) (Versión: 18.0 - Corel) Oculto
Pinnacle Winter Pack (HKLM-x32\...\{67330878-0617-41A9-A3B0-B5298E89E7BC}) (Versión: 1.00.0000.20 - Pinnacle Systems)
Pinnale Systems 32bit Software Keys (HKLM-x32\...\{C7FBAF9B-1E3C-4E1A-8C22-4A4FAEB641CC}_is1) (Versión: - VPP TEAM)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Versión: 1.3.0 - Microsoft Corporation)
Premium Pack Volumes 1-2 (HKLM-x32\...\{88C4D8A6-9954-46A0-965D-92E55DAB8734}) (Versión: 2.0.1 - Corel Corporation)
proDAD DeFishr 1.0 (64bit) (HKLM\...\proDAD-DeFishr-1.0) (Versión: 1.0.64.1 - proDAD GmbH)
proDAD Heroglyph 4.0 (HKLM-x32\...\proDAD-Heroglyph-4.0) (Versión: 4.0.225.4 - proDAD GmbH)
proDAD Mercalli 2.0 (HKLM-x32\...\proDAD-Mercalli-2.0) (Versión: 2.0.112.2 - proDAD GmbH)
proDAD ProDRENALIN 1.0 (64bit) (HKLM\...\proDAD-ProDRENALIN-1.0) (Versión: 1.0.70.1 - proDAD GmbH)
proDAD ReSpeedr 1.0 (64bit) (HKLM\...\proDAD-ReSpeedr-1.0) (Versión: 1.0.37.1 - proDAD GmbH)
proDAD Vitascene 2.0 (HKLM-x32\...\proDAD-Vitascene-2.0) (Versión: 2.0.219 - proDAD GmbH)
PSPPContent (HKLM-x32\...\{162BD2D6-6C63-41A7-8151-93188450D36A}) (Versión: 16.0.0.113 - Corel Corporation) Oculto
PSPPHelp (HKLM-x32\...\{16346B2A-87BC-407C-9D6B-72A4D21ABF03}) (Versión: 16.0.0.113 - Corel Corporation) Oculto
PSPPro64 (HKLM\...\{16582334-495C-4F1C-A66B-3BFD8866B674}) (Versión: 16.1.0.48 - Corel Corporation) Oculto
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Versión: 8.0.1.338 - Qualcomm Atheros Communications)
RBVirtualFolder64Inst (HKLM\...\{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}) (Versión: 1.00.0000 - Roxio, Inc.) Oculto
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Versión: 10.0.14393.31233 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Versión: 7.112.811.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Versión: 6.0.1.8339 - Realtek Semiconductor Corp.)
Red Giant Holiday Pack (HKLM-x32\...\{6F7E6A11-F724-4A6F-ACDF-B56E65906EAB}) (Versión: 1.00.0000 - Nombre de su empresa) Oculto
Red Giant Holiday Pack (HKLM-x32\...\InstallShield_{6F7E6A11-F724-4A6F-ACDF-B56E65906EAB}) (Versión: 1.00.0000 - Nombre de su empresa)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.05 (HKLM-x32\...\{59F6A514-9813-47A3-948C-8A155460CC2A}) (Versión: 3.54.05 - RICOH)
RogueKiller versión 12.12.19.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Versión: 12.12.19.0 - Adlice Software)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Versión: 12.1.77.0 - Roxio)
Roxio File Backup (HKLM\...\{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}) (Versión: 1.3.2 - Roxio) Oculto
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Versión: 2.6.4.17103.1 - Samsung Electronics Co., Ltd.) Oculto
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Versión: 2.6.4.17103.1 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Versión: 1.5.63.0 - Samsung Electronics Co., Ltd.)
ScoreFitter Volumes 1-2 (HKLM-x32\...\{0FDA9ECA-6DA3-480E-B7A9-76F353AF6B6C}) (Versión: 2.0.1 - Corel Corporation)
Setup (HKLM-x32\...\{16006EE1-DDB7-4E5F-8696-9FEF32C0151A}) (Versión: 16.0.0.113 - Nombre de su empresa) Oculto
Smart Defrag 5 (HKLM-x32\...\Smart Defrag_is1) (Versión: 5.8.0 - IObit)
Sonic CinePlayer Decoder Pack (HKLM-x32\...\{9A00EC4E-27E1-42C4-98DD-662F32AC8870}) (Versión: 4.3.0 - Sonic Solutions) Oculto
Title Extreme (HKLM-x32\...\{F7214014-27EE-4237-9978-2F9D1551559B}) (Versión: 2.0.1 - Corel Corporation)
TV 3L PC versión 2.1.5.0 (HKLM-x32\...\{D8CE29B4-FEA1-46F1-B773-1B5FE502C740}_is1) (Versión: 2.1.5.0 - Smart PC Soft, LTD.)
Ultimate Creative Collection (X6) (HKLM-x32\...\_{D839B02E-8C50-4F8F-BA53-84FF75487A1A}) (Versión: 1.0.0.100 - Corel Corporation)
Ultimate Creative Collection (X6) (HKLM-x32\...\{D839B02E-8C50-4F8F-BA53-84FF75487A1A}) (Versión: 1.0.0.100 - Nombre de su empresa) Oculto
Unlocker 1.9.2 (HKLM\...\Unlocker) (Versión: 1.9.2 - Cedrick Collomb)
Validity Sensors DDK (HKLM\...\{40BEDF44-88CF-4FF6-8790-882484452003}) (Versión: 4.4.231.0 - Validity Sensors, Inc.)
Visor Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-040C-0000-0000000FF1CE}) (Versión: 14.0.7015.1000 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Versión: 2.2.6 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Versión: 2.2.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Versión: 1.0.54.1 - LunarG, Inc.) Oculto
Watch Folder (HKU\S-1-5-21-1000389763-2980830304-2624313999-1000\...\AS) (Versión: 1.0.0.1 - Watch Folder)
WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Versión: 5.31.0 - win.rar GmbH)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Versión: 5.50.0 - win.rar GmbH)

==================== CLSID personalizados (Con lista blanca): ==========================

(Si un elemento está incluido en el archivo fixlist.txt, será eliminado.